bwblabs

11 ms·

61.
by bwblabs 8y ago
I think instead of moving everything to one new (central hosted) silo like GitLab.com, we should move to self hosted git instances, with some GitHub like web interface to do remote comments/pull requests (e.g. gitea/gogs with some
62.
Jp: terminal plots from JSON data(github.com)
3 points by bwblabs 9y ago|0 comments
63.
by bwblabs 10y ago
Pretty elaborate research indeed, I once filed a very simple, but just as dangerous, stored XSS on www.linkedin.com (with access to cookies) + some other bug, hoping to speedup my Partner API Request, got $400 for the XSS and many weeks lat
64.
by bwblabs 10y ago
Microsoft never had this issue: "For security reasons, data URIs are restricted to downloaded resources. Data URIs cannot be used for navigation, for scripting, or to populate frame or iframe elements." - https://msdn.m
65.
by bwblabs 10y ago
The code is mainly written in C ( https://github.com/h2o/h2o ) with some Perl testing. The Mruby for small (header/push) logic isn't that bad, and not bad in terms of performance either ( https://h2o.
66.
by bwblabs 10y ago
Any experiences with running h2o on production sites? The documentation is a bit lacking sometimes, luckily the code is well written.
67.
by bwblabs 10y ago
A port to a way more strict type and memory safe language would be great, but as Craig Ringer from 2ndquadrant replies: the postgres project is pretty conservative & this could only happen in an incremental way.
68.
by bwblabs 10y ago
Indeed way cleaner than Iron in terms of parsing query (int) arguments and JSON post data (BodyParser).
69.
by bwblabs 10y ago
And lots of contradicting privacy claims: "Secure Exam Proctor Exam Environment: You can generally utilize the Secure Exam Proctor for taking a proctored examination without revealing any Personally Identifiable Information about yours
70.
by bwblabs 11y ago
I actually use SeaFile for some clients (since OwnCloud doesn't do client side encryption at all), after Wuala shut down last year. I actually was disappointed by the security and features too ( https://forum.seafile-server.o
71.
by bwblabs 11y ago
And that's even without 'DNSSEC and IPv6 support', 'Regional Routing' and 'DNS Load Balancing (where available)', that's only available for 'UltraDNS Enterprise'... (I'm running my own
72.
by bwblabs 11y ago
Running my own DNS servers. But having issues with clients using Rackspace Apps - hosted email (still down due to UltraDNS). Would there be anything against using multiple large anycast DNS providers?
73.
by bwblabs 11y ago
That's called lean right? ;) It's only something worth solving if it hits the log files.
74.
by bwblabs 11y ago
I cannot try anything before entering my CC number (and paying, no free month or anything), nor finding any detailed information about the setup (apart from 'public/private key client side JS'). But the site/server/
75.
Cameron's World: Web-Collage of GeoCities(cameronsworld.net)
3 points by bwblabs 11y ago|1 comments
76.
by bwblabs 11y ago
Can't wait to use the new JSONB operators of 9.5, e.g.: SELECT '{"k1":"v1"}'::JSONB || '{"k1":"v2","k2":true}'::JSONB => {"k1": "v2",
77.
by bwblabs 11y ago
Also autocomplete doesn't seem to work with an alias of a quoted table, in case of using keywords as table names or having casing in names, e.g.: SELECT * FROM "access" a WHERE a. But it's a nice tool! (:
78.
by bwblabs 11y ago
Article is based on Self-control forecasts better psychosocial outcomes but faster epigenetic aging in low-SES youth ( http://www.pnas.org/content/early/2015/07/08/1505063112.full... ), someone with
79.
by bwblabs 11y ago
I stopped reading after this sentence: "One kale sample reported thallium at 1.14 ppm, nickel at 20 ppm, and aluminum at 120 ppm. (As has been widely reported, aluminum is often suspected as a cause of both autism and Alzheimer’s dise
80.
by bwblabs 11y ago
Use 2048 bits, not 4096. I'm kind of paranoid and always try to use the highest recommendations, HSTS, all-SSL, etc. But in terms of SSL connection setups / second, your CPU will be the bottleneck, and having 4096 bits will limit
81.
by bwblabs 12y ago
Would be funny to include http://en.wikipedia.org/wiki/EURion_constellation on websites, so you cannot make screenshots with Photoshop ;)
82.
by bwblabs 12y ago
Another trick is to invert the colors and then import it to Photoshop & invert it back.
83.
by bwblabs 12y ago
Ok, just got a (signed) message back from Robin Alden (CTO): "This certificate has been revoked.", in the CC was: signedmalwarealert@comodo.com , so that seems to be the (internal) email address.
84.
by bwblabs 12y ago
Yes, by email: abuse@comodo.com (the only non sales address I could find), no response yet. I looked at the Twitter & Facebook but they looked pretty dead. No replies @comododesktop ( https://twitter.com/comododesktop&#x2
85.
Ask HN: How to report/revoke malicious Comodo code signing certificate?
2 points by bwblabs 12y ago|3 comments
86.
by bwblabs 12y ago
Ever heard of StartSSL Free? https://www.startssl.com/?app=39
87.
by bwblabs 12y ago
1) monitor the complete certificate chain 2) indeed have a backup certificate ready (might be non EV), this is especially a must if you use HSTS [1] (which you should use BTW) it is actually a (low priority) government recommendation (B5-6)
88.
by bwblabs 12y ago
Process - Know where your key is - Know how to generate a new CSR from that key It's adviced to use a NEW private key, in case there was a private key compromise you didn't know about. Also see https://www.s
89.
by bwblabs 12y ago
https://github.com/glyptodon/guacamole-client/search?q=video... By looking in the code I think they use Canvas, streaming video would be interesting. Looking at guacamole-common-js/src/main/webapp&#
90.
by bwblabs 12y ago
It was one of the few lists I found. Although the url redirects to an url containing 'deployment-2012-02-25-en' the page actually states 'Last updated: 27 May 2014', so it's not so out of date. If your registr

More ›